WooYun.org

<?php
include_once "include/conn.php";
$aid=!empty($_GET['aid']) ? trim($_GET['aid']) : 0 ;
if ($aid==0)
{
    echo "0";
	exit;
}
mysql_query( "Update tb_contents set f_hits=f_hits+1 where f_id='$aid'", $conn);
$sqlArticleShow="select * from tb_contents where f_id = " . $aid;
$rsArticleShow = mysql_query($sqlArticleShow, $conn);
if ($rowArticleShow=mysql_fetch_array($rsArticleShow))
{
    echo $rowArticleShow["f_hits"];
}
else
{
    echo "0";
}
?>

$conn = @mysql_connect("localhost", "root", "xbdjj2010a") or die('Could not connect: ' . mysql_error());
mysql_select_db("webdatabase"); 
mysql_query('set names utf8');
session_start();
session_cache_expire(30);
header("Cache-control: private");
set_time_limit(0);